Talk Morgan Forums Community The Malvern Arms AVG security warning

Tim,

agree completely.

The Macs back up to a Time Capsule and every couple of weeks I take a mirror copy of my files to an external drive.

I run ESET AV and Malware Bytes on the 3 Apple devices.

The only password I use unchanged os on the BT Hub 5. Unlike many routers I understand every BT Hub ships with an unique 10 digit alpha numeric wifi password and a different Admin Password that are machine generated and even BT has no record of them. So do I really need to change them?

Depends on your risk appetite, I would say. I can't see any reason not to change any password from the default, machine generated or not.

I agree with all the above. May I add one other bit. Physical security is as important.

When you do backups make certain you encrypt them. If the house is broken into and the device/disc is stolen they can read everything. At that point it will make it a lot worse as you are recovering your home and your entire on-line access.

Also if you are using a modern machine and comfortable with it then turn on your disc encryption on the machine. Do write the boot (disc encryption on boot up) password down on paper with a different description. Example being bit of paper with "Hornby password" written on it or something else obscure. If you forget it (it will not be demanded as the software will cache it in most cases) then you are going to be a bit frustrated.

Never leave a default password on any device.
Many routers offer "enable remote support" menu options never turn this on as it allows the device to be approached from the Internet. There are a LOT of nasties out there trying to get into home networks as they can then find places to lay the cuckoo's egg that turns poorly defended devices into "bots" or remote triggered robots which provide these attacks. A signal is sent out from baddyHQ that light up all the remote cuckoo's and they all attack causing what is called a denial-of-service as they all swamp the service making it non-responsive to normal customers.

A lot of the newer home automation stuff has little to no security and so needs to be behind a decent firewall/router. Plenty of examples of these new home cameras left on default settings being readable from the Internet.
https://reolink.com/unsecured-ip-camera-list/

A decent guide to consider is here - https://lilin.zendesk.com/hc/en-gb/artic...-secure-online. The same applies for many of the newer home toys.

In the US there have been a rash of Alexa/Google/Apple enabled door locks. https://community.smartthings.com/t/how-to-make-alexa-open-close-door-locks/109872 However there have also been some examples of intruders talking through a window gap using it to open the door!

Before anyone looks into using these locks please confer with your insurance company and IMHO get one of the Darwin Awards application forms just for the hell of it. Just think of it. A dog that can say sausages, Alexa mis-reading a noise, a program on TV etc etc. It is my suspicion that these Alexa type devices are going to be a serious target for the cyber and physical plebs in the future.

I agree about Alexa...even sounds Russian!
These days we have become too reliant on “smart” devices. How many people actually learn about security for these devices? The collection and monitoring they do to get data about users and can then sell this on/use it for targetted marketing etc..
The recent Facebook fiasco is an example of the naivety of too many people.
I believe that basic security advice/teaching should be introduced definitely in schools, parents could then reap the benefits too from parent/teacher sessions built into the system.

Chaps,

I have read all the foregoing with some interest but I admit to a total lack of understanding with most of the jargon!!
As I only use my lap top to talk to you lot plus surf the net, do I really need to worry about the Russians?
I feel they would be sorely disappointed if they found their way into my electronic world!!

Most probably highly likely....

Dont know about the paranoid bit, but you have left me really curious as to what is important / valuable enough to take that degree of effort. Do you work for GCHQ?

If that is literally all you do on your laptop, then I cant see what you have to protect. The Russians could get into your lappy and do the Volga Boat song without you losing anything much. Its a bit like me leaving the house unlocked - burglars are more likely to leave me something out of sympathy.

OK Alistair. Can you give me a computer idiots guide to installing / using encryption on a W10 home system please

Windows 10 comes in two flavours. Home and Pro. You can go into the windows store and upgrade from home to pro if you need to.

A quick walk through Bitlocker https://www.howtogeek.com/347730/why-doe...-gives-it-away/

If you have windows 10 Pro you have included the Bitlocker capability which will encrypt the disc (password on boot up to decrypt). Hit the windows key, type encryption into the search box and select manage bitlocker. Follow the instructions/ SAVE THE KEY to an external disc/USB (find an old USB key for it)

If you have Windows Home it was assumed you would not need it and so Bitlocker is not included. You have two choices, Upgrade through the Windows Store to Pro and use it or go third party. Some AV products do include a disc encryption but this will leave you stuck with them on renewal, not my choice.

A review of some free software to supplement Win10Home
https://www.lifewire.com/free-full-disk-encryption-programs-2619180

PC Mag review of paid software from this year
https://www.pcmag.com/business/directory/encryption

Where you see the phrase TPM or trusted platform module this means that the computer has a padlock like capability in its hardware with a signature. It allows the encryption to use this to be very highly secure. This can be found mostly on business laptops, MS Surface devices and products built for the security market. It is not needed for disc encryption but if it does exist it will further increase the value of the encryption.

My personal view would be to upgrade and use MS software. It means you are not trying to unpick two products if things get furry. It means alignment of patching and upgrades etc.

Keep the password, USB recovery key and backup disc hidden where possible, certainly not near the device (in same room)

Does that help ?

As for backup you may wish to look at MS Windows Storage Spaces function as this allows replication of content to physically different devices including across a LAN I believe. If you have anoth disc that is mountable on a home server or second PC in the house then this can be used. https://www.howtogeek.com/109380/how-to-use-windows-8s-storage-spaces-to-mirror-combine-drives/

Sorry if I have over complicated things for those of you who simply browse the interwobble, you are right there is little value (until it is stolen and all the passwords you saved in the browser are found and used to mess your life up) Do check to see if your home insurance has identity theft included.